How threat actors are using artificial intelligence | Intel 471 Skip to content

How Threat Actors are Using Artificial Intelligence

Jan 29, 2025
Homepage Hero

Artificial intelligence is a red-hot mess, filled with contradicting predictions over whether it will bring vast benefits. From a cybercriminal perspective, AI is already providing productivity gains, from reconnaissance to drafting phishing emails to help in creating scripts and code. Ashley Jess, senior intelligence analyst with Intel 471, says threat actors in 2024 developed AI tools for specific tasks, such as data exfiltration and analysis tools designed for ransomware and data extortion groups. The cost of these tools has fallen significantly since 2022, increasing their diversity as well as their availability. Threat actors are using a combination of open-source models such as Meta’s Llama and API access to others. In this Studio 471, Jess shares her insight into how AI will shape the threat landscape.

 

Participants:

Ashley Jess, Senior Intelligence Analyst, Intelligence Operations, Intel 471
Jeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471

Featured Resource
Intel 471 Logo 2024

AresLoader is a new loader malware-as-a-service (MaaS) offered by threat actors with links to Russian hacktivism that was spotted recently in the wild.